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Pleas* amend claim* 1-4, 6, 7, 13, and 14. 
Claim 11, and 15 ware previously attended ♦ 
Claim* 8-10 and 12 were previously cancelled. 
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1, (Currently Amended) A system for enabling 
authentication of a non-preautHenticated client-User means in a 
Kerberos domain servicing Multiple requesting aon-preauthenticated 
clients while eliminating any delays due to multiple 
authentication request s, said system comprising! 



(a) client-User means (10) for requesting 
authentication from a specialised multi-processor, 
multi-Platform client-server means (13) i 



(b) said specialised mult i -processor* mult 1 -plat form 
client-server means (13) for communicating with a 
Xexbexos server means (20) for developing a specific 
set of credentials for each client requesting 
authentication^ **&4 — speci a lis e d — ml * amfe 
ntllisi 



(c) said Kerberos server means (20) for developing an 
asynchronous authentication response and a Ticket 
Granting Service to said specialised multi-processor, 
multi-platform client-server means (13) • 
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2. (Currently attended) Vtaa system of Claim 1 wherein said client- 
Viar nwBA (10) includes* 

(el) multiple client-users who nay concurrently 
seek authorisation to utilise said specialized 
multi-processor, rail 1 1 -plat form client-server 
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3. (Currently tended) The system of claim 1 wherein said Kerberos 

Htm tti-tt (20) includes t 

(el) swans to return an authentication response to 
said specialised naltl-procsssor, amlti-plafcform 

(c2) means to return a Ticket Granting service 
signal to said specialised aailti-procsasor, imlti- 
platform client-server swans. 
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4. (Currently Emended) *he system of claim 1 wherein said 
specialised multi-processor, multi-platform client - server aeons 
includes s 

(bl) comunication means OA&C40, C0US42) for 
exchanging information between a requesting 
principal or client-User, a Master Control 
Program, a general security Service Library 
(OSS38), and a Kerberos Support Library (KSL34); 

(b2) said Master Control Program (60) for 
controlling said communication means, said General 
Security Service Library and said Kerberos Support 
Library (34); 

(b3) said General Security Service Library (OSS38) 
providing multiple threads for handling multiple 
concurrent requests for authentication; 

(b4) said Kerberos Support Library (34) for 
developing and storing specific authentication 
credentials for each validated client -User 
authentication request* 
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5. (Original) The system of claim 4 wherein said Kerberoa Support 
Library (34) includes s 

(b4a) maans for accessing said Kexberce 

server means (20) to acquire an 

authentication response and a Ticket Granting 
Service. 
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6. (currently Amended} & secure Milage tranfmliiion system in a 
Kerberos environment which permit: 0 a client -user to operate in a 
network for authentication request transmittal and message 
response without suspending client service When a Kerberos Server 
(20) has not yet responded to an earlier request for an 
authentication message code signal, said system comprising • 

(a) client-terminal means (10) to indicate an original 
request for validation of an authentication message 
signal from a Kerberos Server (20); 

(b) specialised Pal ays — Ol e a g Pa a h multiprocessor, 
multi-platform server means having program means (MARC 
40 and C0KS 42), under control of a Master Control 
Program (MCP60) , for transmitting requests for service 
to a Kerberos Support Library (34), a General Security 
Service Library (38) and to said Kerberos Server (20) 
for the return of an authentication response message to 
said client terminal means (10) from credential 
Information placed in said General Security Service 
Library of said specialized multi-processor, multi- 
platform server means/ 

(c) means for enabling said Kerberos Support Library 
(34) to elicit authentication information and Ticket 
Granting Service from said Kerberos Server (20) for 
deposit as validating credential data in said General 
Security Service Library (38) . 
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7. (Currently Amended) A metbod for asynchronous authentication of 
a nca~preautbanticated originating terminal in a Kerberos domain, 
said authentication occurring without delay due to other 
concurrent requests for authentication fay other terminals each as 
client -users and principals, said method cosprising the steps oft 

(a) originating a request, to a specialised multi- 
processor, nmltl-platforn Unisys — Ol a asPaM i client - 
server, for authentication by a non-preauthenticated 
terminal and including the step oft 

(al) . originating concurrent multiple requests for 
authentication from multiple client-Users and 
principals/ 

(b> processing said originating request and other 
originating requests concurrently and including the 
steps oft 

(bl) developing a set of identifying credentials 
for said originating terminal and including the 
steps oft 

(bla) requesting, via a communication means 
(marc 40, C0K942), under control of a Master 
Control Program (MCP60), a Kerberos Support 
liibrary (34), and a Kerberos Server (20)^ for 
credentials and a session key? 

(bib) creating a credential structure by 
said Kerberos Support Library (34) to 
identify said originating terminal and 
provide a Ticket Granting Service; 
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(bio) generating, toy a General Security 
Service Library (OSS 38), [[OF]] of X Nsma- 
Bandle end Q8B Credential Tag that identifies 
the originating terminal to said OSS (38) and 
to said xarberos Support Library (34) # 

(told) generating a message, by said Kazberos 
Support Library (34), to inform said 
communication means (MARC 40, G0MS42) that 
the Kerberoe authentication cycle has been 
successfully completed* 

(b2) asynchronously validating said originating 
terminal for use of a xerberos domain; 



(c) responding back asynchronously toy said specialised 
Multl -processor, multl -plat form Ol e arPa fch client-server 
to authenticate the validity of said original 
requesting terminal without any delays due to other 
concurrent requests for authentication which includes 
the step oft 



(ol) utilising said communication means (MARC 40, 
C0HS42) to transmit an authentication signal from 
a Kerberos Support Library (34) to said 
originating terminal. 
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8. (Cancelled) . 

9. (Cancelled). 

10. (Cancelled) • 
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11, (Previously Presented) The method of claim 7 wberein step 
(bl) includes the stops oft 

(llbla) processing concurrent 

authentication requests via multi- 
threaded proceeding meane to develop a 
specific credential for each originating 
terminal^ 

(llblb) conveying a completed 
authentication request to said Kerbezos 
Support Library (34) and said 
communication means (MARC 40, C0K842) . 
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13. (Cancelled) . 
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13. (Currently Amended) xn a network wherein multiple client- 
terminal* communicate with a specialised Uftt s y s Ol e a w Pa Mi multi- 
processor, mult 1 -plat form client-server means (19), having a 
Kerbaros Support Library (34), and comma i eating with a 
communication* means (MARC 40, CONS 43), a General Security 
Service Library (38) and said specialised multi-processor, multi- 
platform client-server means for accessing respo n se Information 
from a Kerberos server (20), a me t h od for enabling a requesting 
client-terminal to receive an authentication resp onse message 
asynchronously from said Kerberos Server (20) comprising the 
steps oft 

(a) initiating an authentication commend request by a 
requesting client-terminal; 

(b) utilising said specialised multi-processor, moltl- 
platform client-server means as a communication 
management system, under control of a Master control 
Program (MCP60) , using a communication means having a 
communication management program (COWS 42) and menu 
assisted resource control program (MARC 40) to 
communicate said authentication command request to said 
Kerberos Server (20) via said Kerberos Support Library 
(34) ana to receive a Kerberos response message for 
credential processing by said General security Services 
Library (38) which is then conveyed by said 
communication means (40, 42) to said requesting client- 
terminal. 
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14. (Currently Amended) The method of claim 13 which Include* the 
•tap oft 

(c) Terminating the eeaeion between said client - 
terminal (10) and eaid Xerberoa Support Library (34) 
once the authentication requeet reeponee has been 
transmitted from said General Security library (36) , 
thua allowing said apeolaliaed multi-proceaaor, mnlti- 
platform client-eerver means (13) to prooeea other 
authentication requeate* 



«¥k\aad\470O .doc 



16 



PA(£ 16/18 1 RCVD AT S14/20O5 7:05:20 PM [Eastern Daylight Time] 1 SVR:USPT0«EFXRM/5 * DNIS:8729306 1 CSID: * DURATION (mnKs):05-50 



0 6. 24. 05 06:59 AM *UNISYS~RB LAW DEPT P17 



15. (Previously Presented) Th* method of claim 13 wherein step 
(b) Includes the step oft 

(bl) initiating an error message by said Xezberos 
Support Library (34) when a failure in 
authentication has been recognised; 

(b2) requesting, via said error message, that said 
requesting client-terminal should initiate a log- 
on* 
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